Privacy Policy

This privacy policy sets out how The Lavender Whisk uses and protects any information that you give us when you use this website, enquire with us and/or place an order.

The Lavender Whisk is committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using this website, enquiring with us, and/or placing an order, then you can be assured that it will only be used in accordance with this privacy statement. The only information that we will hold, is that which you have personally provided to us.

The Lavender Whisk may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes. This policy is effective from May 2018 and adheres to the guidance set out by The EU General Data Protection Regulation (GDPR).

The information we collect

We may collect the following information:
• Name
• Contact information including email address and phone number • Wedding Date and Venue

What we do with the information we gather

We require this information to understand your needs and provide you with a better service, and in particular for the following reasons:

• • • •

Your data is stored on relevant systems such as cloud systems, and accounting systems which are GDPR compliant. If we are required by law to share any information, we will check with each party concerned to ensure they are happy for that to happen. An example of this would be if HMRC requested an audit.

To fulfil our contract with you and complete your order.
Internal record keeping.
To fulfil our obligations to HMRC.
We may use the information to improve our products and services.

We keep a record of any orders you make from us, so we can help to deal with any enquiries or problems you may have in the future, and so we can ensure that any information that we send to you is appropriate. Personal data that we process for any purpose shall not be kept for longer than is necessary for that purpose.

When you place an order with The Lavender Whisk you will be asked whether you’d like to consent to us displaying your order as part of our marketing materials. By giving your consent for us to do this you understand your personal data will be in the public domain and we assume no responsibility for the usage of this data subsequently. You may request to have your personal data removed at any time and we are more than happy to comply within 7 working days.

We keep a record of any e-mail communication you send us, so we can track any problems or concerns you’ve had.

We’ll also ask you questions from time to time by email (if we have your consent to contact you by email), this will give us data that can be used to improve your experience of shopping with The Lavender Whisk. You’re under no obligation at all to answer these questions, they’re all optional, but they will help us communicate more effectively with you.

Legal Basis for Processing Data

The Lavender Whisk’s legal basis for processing data are:
Consent – customers that consent to signing up for our newsletter. Legal Obligation – tax purposes.
Contract – customers that place an order with The Lavender Whisk.

Cookies and Google Analytics

A cookie is a small file which asks permission to be placed on your computer’s hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.

We use traffic log cookies to identify which pages are being used. This helps us analyse data about web page traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.

Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.

You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.

Our website uses Google Analytics to ensure we are meeting your customer needs. Google Analytics stores usage data which may include your IP address, geographical location, referral source, length of visit and page views – although a lot of this is aggregated data. The legal basis for this is legitimate interest for the basis of ensuring we are meeting customer needs.

We may process information you submit to us when you contact us for the purposes of ensuring we answer your query effectively.

The Lavender Whisk kindly request that you do not supply any other person’s personal data to us, unless required by law or you have their explicit consent to do so.

Controlling your personal information

You may choose to restrict the collection or use of your personal information in the following ways:

whenever you are asked to fill in a form on the website, look for the box that you can click to indicate that you do not want the information to be used by anybody for direct marketing purposes

if you have previously agreed to us using your personal information for direct marketing purposes, you may change your mind at any time by emailing us at rebecca@lavenderwhisk.co.uk

We will not share your information with anybody, unless required to do so to fulfil your order and this will always be discussed with you prior to passing any information on. We may also be required to share your information by law.

How we protect data

We recognise that the Internet is not a 100% secure platform for communication and, accordingly, we cannot guarantee the security of any data you send to us (or we send to you) via the Internet. We are not responsible for any damages which you, or others, may suffer as a result of the loss of confidentiality of such information.

We take every precaution to safeguard your information. All personal data stored by us is kept on a server in a secure environment. The computer on which work is conducted on is password protected, data held in the cloud is password protected and held on encrypted systems and third-party software have their own security systems.

The risks of a breach are minimal due to the precautions mentioned above being taken, and close monitoring is undertaken to ensure security systems are always up to date. Breaches will be identified, reported, managed, and resolved according to the ICO guidelines.

All The Lavender Whisk data is held for only as long as necessary. We store sensitive data for as long as projects are in progress. Email addresses provided via Mailchimp are stored until consent is withdrawn, re consent is requested every 2 years. Information required for tax and legal requirements are held for 6 years as a requirement by law.

We do not store or process your card details ourselves, they are processed by PayPal. Please see PayPal’s privacy policy for their information on this matter.

How you can help us protect your data

Please bear in mind that whenever you willingly divulge personal data online in non- protected situations – for example on social media, message forums, through email, or in chat spaces – that data can be collected and used by others. In short, if you post personal data online that is accessible to the public, you may receive unsolicited communications from other parties in return. Also remember to close your browser window when you have finished using the computer. This is to ensure that others cannot access your personal data and communications. If you share a

computer with someone else or are using a computer in a public place like a library or Internet café. We cannot confirm or warrant the security of any data you communicate to us, and you do so at your own risk. Once we receive your communication, we make our best effort to ensure its security on our systems.

Requesting Your Information

If you would like to review the data you have provided to us because you feel that what we presently have on record is incorrect, and/or you would like your data erased from our records, you can so do by contacting us.

Under GDPR you have a right to be forgotten, to withdraw your consent, to change information we hold about you, and to restrict processing.

The Lavender Whisk are more than happy to comply with this in accordance with the law.

Marketing Material

If you’re happy to receive marketing communications by email, you may sign up for our newsletter. This means you will receive regular marketing updates including freebies, special offers, industry news, and business tips and advice.

You may unsubscribe and have the right to be forgotten at any time. We will never spam you or sell your email address to 3rd parties.